CVE-2018-8553

CVE-2018-8553 is a remote code execution vulnerability in how Microsoft Graphics Components handle memory objects. The flaw, affecting multiple Windows versions (Windows 7, Windows Server 2008/2012 family, Windows 8.1, Windows 10, Windows RT 8.1, and Windows Server 2016/2012 R2), stems from memor...

CVE-2019-0897

CVE-2019-0897 describes a remote code execution vulnerability in the Windows Jet Database Engine triggered by improper handling of in-memory objects. The connected CNVD entries reiterate a buffer overflow/heap overflow issue in the Windows Jet Database Engine, caused when data boundaries are not ...

CVE-2019-0905

CVE-2019-0905 describes a remote code execution vulnerability in the Windows Jet Database Engine, triggered when the engine improperly handles objects in memory. An attacker could exploit this by convincing a user to open a specially crafted file, potentially allowing arbitrary code execution on ...

CVE-2019-0907

The CVE-2019-0907 issue concerns the Windows Jet Database Engine and a remote code execution vulnerability caused by improper handling of objects in memory. An attacker could entice a user to open a specially crafted file to trigger arbitrary code execution on the victim’s system. Microsoft’s upd...

CVE-2019-1012

CVE-2019-1012 refers to an information-disclosure vulnerability in the Windows GDI component where memory contents can be disclosed due to improper handling of objects. The issue could be exploited by convincing a user to open a specially crafted document or visit an untrusted page, enabling info...

CVE-2020-1031

Technical details for CVE-2020-1031 are not publicly provided in the Connected Documents. The materials reference Windows DHCP and patches in general but do not specify affected products/versions, exploit details, or remediation for this CVE. Monitor for updates.

CVE-2020-1251

CVE-2020-1251 corresponds to a Windows Win32k elevation of privilege vulnerability. The connected sources confirm the flaw resides in the Windows kernel-mode driver’s handling of memory objects, enabling local privilege escalation. Affected component: Win32k (kernel-mode driver) in Windows; root ...

CVE-2021-1726

CVE-2021-1726 is a SharePoint Server spoofing vulnerability observed in multiple versions (2013/2016/2019). Exploitation involves spoofed content convincing users of a trusted site. Microsoft released updates (e.g., MS21-4493194/4493195 and related MSKBs) addressing this CVE; affected deployments...

CVE-2022-22043

CVE-2022-22043 is a Windows vulnerability affecting the Fast FAT File System Driver, described as an Elevation of Privilege. The NVD entry lists a Local attack vector, Low privileges required, and no user interaction, with a high impact on confidentiality, integrity, and availability (CVSSv3.1: A...

CVE-2022-41056

Technical details for CVE-2022-41056 are not present in the provided documents. Related items cover Kerberos/Netlogon CVEs, but no affected product/version/impact for this CVE is specified here. Monitor for updates.

CVE-2022-41090

Technical details for CVE-2022-41090 (Windows PPTP DoS) are not provided in the connected documents. No affected products, versions, or fixes are listed here. Monitor official advisories for updates and remediation guidance.

CVE-2016-3301

CVE-2016-3301 affects the Windows Graphics Component in the Windows font library, enabling remote code execution via a crafted embedded font. Affected products include Windows Vista SP2; Windows Server 2008 SP2/R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; W...

CVE-2018-0813

Technical details for CVE-2018-0813 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2018-8136

CVE-2018-8136 is described as a remote code execution vulnerability in how Windows handles objects in memory, affecting Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008/2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10 and Windows 10 servers. The con...

CVE-2018-8341

CVE-2018-8341 describes an information-disclosure vulnerability in the Windows kernel where objects in memory are improperly handled. Affected products include Windows 7, Windows Server 2012 R2/2012, Windows RT 8.1, Windows 8.1, Windows 10 (and corresponding Server SKUs 2008/2012/2016/2019-era fa...

CVE-2018-8343

CVE-2018-8343 describes a local elevation-of-privilege flaw in the Windows Network Driver Interface Specification (NDIS). The vulnerability arises when ndis.sys does not validate the length of a destination buffer before copying memory, enabling privilege escalation on affected Windows versions (...

CVE-2019-0899

The CVE-2019-0899 entry concerns a remote code execution vulnerability in the Windows Jet Database Engine. Connected CNVD records describe a buffer overflow/heap overflow in the Jet DB Engine when memory boundaries are not properly validated, enabling exploitation through in-memory operations. Th...

CVE-2019-1010

Technical details about CVE-2019-1010 are not publicly available in the provided connected documents. Monitor for updates; current sources only reference Windows GDI information disclosure and MS patching without affected versions or exploit specifics.

CVE-2020-0643

The CVE-2020-0643 entry concerns a information-disclosure vulnerability in Windows GDI+ where memory objects are mishandled. Connected CNVD-2020-04849 describes a Microsoft Windows Graphics Device Interface Plus information disclosure vulnerability with the same affected component; it states that...

CVE-2020-0778

CVE-2020-0778 is described as an elevation of privilege in the Windows Network Connections Service, caused by how the service handles objects in memory. Public metrics show a CVSSv2 base score of 4.6 (Medium) and a CVSSv3 base score of 7.8 (High) with local attack, low complexity, no user interac...

CVE-2020-0953

CVE-2020-0953 is described as a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of memory objects. It affects Microsoft Windows/Windows Server Jet Database Engine components and, per CNVD entries, could be triggered by a user opening a specially ...

CVE-2020-1085

CVE-2020-1085 is described in CNVD-2020-52929 as an elevation of privilege in the Windows Function Discovery Service. The vulnerability stems from how the Function Discovery Service handles objects in memory, enabling an attacker to execute code with elevated privileges on affected Windows system...

CVE-2020-1584

CVE-2020-1584 is a Windows elevation-of-privilege vulnerability in how the dnsrslvr.dll handles in-memory objects. The underlying issue involves heap allocations and object copying in several DNS record copy paths (e.g., SigRecordCopy, NsecRecordCopy, KeyRecordCopy, OptRecordCopy, DhcidRecordCopy...

CVE-2021-1640

CVE-2021-1640 is a Windows Print Spooler Elevation of Privilege vulnerability affecting the Print Spooler service, caused by handling of print jobs submitted to FILE: ports. The vulnerability can lead to local privilege escalation with impacts across confidentiality, integrity, and availability (...

CVE-2021-1649

Technical details for CVE-2021-1649 are not publicly provided in the supplied documents. Monitor for updates from the connected sources for affected products, impact, and fixes.

CVE-2021-24088

CVE-2021-24088 is a Windows Local Spooler RCE vulnerability. The issue stems from a bug in EnumJobsInLocalQueue where an integer overflow allows a crafted buffer to overwrite metadata and adjacent heap allocations; this can enable arbitrary data writes and potential code execution. Affected compo...

CVE-2021-27089

Technical details for CVE-2021-27089 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and affected products.

CVE-2021-33788

Technical details about CVE-2021-33788 are not provided in the supplied documents. Monitor for updated disclosures and CVE metadata.

CVE-2021-38635

CVE-2021-38635 refers to a Windows Redirected Drive Buffering Subsystem Driver Information Disclosure vulnerability. Affected: Windows OS components involving the Redirected Drive Buffering Subsystem Driver. Root cause and affected versions are not detailed in the provided documents beyond the vu...

CVE-2021-41343

Technical details for CVE-2021-41343 are not publicly provided in the supplied documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates from official advisories.

CVE-2022-38051

CVE-2022-38051 relates to a privilege-elevation vulnerability in the Windows Graphics Component. According to the connected CNVD entry, the issue stems from improper privilege assignment within Microsoft Graphics Component, enabling a local attacker to escalate privileges. The NCSC advisory corro...

CVE-2023-21755

CVE-2023-21755 is a Windows Kernel Elevation of Privilege vulnerability described as a local, high-severity issue (CVSS 7.8) with low attack complexity and no user interaction required. The provided documents confirm the vulnerability name and impact characteristics but do not specify the exact r...

CVE-2011-0661

CVE-2011-0661 describes a remote code execution vulnerability in the Windows SMB Server service. The root cause is improper validation of fields in SMB requests by the SMB Server, allowing an unauthenticated remote attacker to execute arbitrary code via a malformed SMBv1 or SMBv2 packet. Affected...

CVE-2017-0077

CVE-2017-0077 is a Windows kernel vulnerability described as the Win32k Information Disclosure Vulnerability. It affects multiple Windows versions (Windows 7 SP1, Windows 8.1, Windows 10 releases up to 1703 and Windows Server 2016, among others) and is exploitable by a local, authenticated attack...

CVE-2017-8696

CVE-2017-8696 targets Microsoft Windows components (Windows Uniscribe/Graphics Component) across Windows Server 2008 SP2, R2 SP1, Windows 7 SP1, Office 2007 SP3/2010 SP2, Word Viewer, Office for Mac 2011/2016, Skype for Business, Lync, Live Meeting 2007 Add-in/Console. The vulnerability enables r...

CVE-2019-0890

The connected CNVD entries describe a vulnerability in Microsoft Windows Jet Database Engine: a buffer overflow/heap overflow caused by improper validation of data boundaries during memory operations. This vulnerability affects Windows Jet Database Engine components; attacker-accessible impact co...

CVE-2019-1157

The CVE-2019-1157 entry describes a remote code execution in the Windows Jet Database Engine due to improper handling of in-memory objects. An attacker could lure a user to open a specially crafted file to exploit this, enabling arbitrary code execution on a affected system. The vulnerability aff...

CVE-2019-1236

CVE-2019-1236 describes a remote code execution vulnerability in the VBScript engine related to how it handles objects in memory. The issue is tied to the VBScript engine’s object memory management and is documented as a vulnerability distinct from CVE-2019-1208. The vulnerability affects Interne...

CVE-2020-1207

Technical details for CVE-2020-1207 are not publicly available in the provided documents. Monitor for updates from official advisories and security bulletins for affected components and remediation.

CVE-2020-1520

CNVD-2020-49363 and CVE-2020-1520 describe a Windows Remote Code Execution flaw in the Windows Font Driver Host caused by improper memory handling. Affected: Windows Font Driver Host on Windows/Windows Server. Impact: remote code execution with attacker gaining code execution on the victim. Remed...

CVE-2020-1565

CVE-2020-1565 is a Windows elevation-of-privilege flaw: when the Public Account Pictures folder incorrectly handles junctions, an attacker who already has code execution on the target could exploit a crafted application to gain higher privileges. The core issue, per connected sources, is how Wind...

CVE-2020-16959

CVE-2020-16959 is a Windows Back- up Engine elevation-of-privilege vulnerability. The connected records confirm the affected component as the Windows Backup Engine and describe a local elevation of privilege with low attack complexity and no user interaction required, yielding high impact to conf...

CVE-2021-26413

CVE-2021-26413 is the Windows Installer Spoofing Vulnerability. Microsoft and CVE records confirm a local-attack surface in the Windows Installer component that can impact integrity (as per CVSS) without user interaction. Public exploit details are not provided in the connected documents; however...

CVE-2021-28333

Technical details about CVE-2021-28333 are not publicly provided in the supplied documents. The connected entries mention the vulnerability at a high level but do not specify affected products/versions, root cause, impact, or fixes. Monitor for updates.

CVE-2021-36969

Technical details for CVE-2021-36969 are not publicly available in the provided documents. Connected sources reference the CVE and vulnerability class but do not specify affected product versions, root cause, exploitability, or fixes. Monitor for updates.

CVE-2021-40466

Technical details about CVE-2021-40466 (affected product/component, root cause, impact, and fixes) are not provided in the connected documents; available sources only state the vulnerability at a high level. Monitor for updates.

CVE-2021-41340

Technical details for CVE-2021-41340 are not publicly provided in the connected documents. Monitor for updates as only high-level description is available from initial and related sources.

CVE-2022-24544

Technical details for CVE-2022-24544 are not publicly available in the provided documents. Monitor for updates.

CVE-2015-0057

CVE-2015-0057 is a local privilege escalation in the Windows kernel-mode driver win32k.sys. The vulnerability in Win32k.sys allows local attackers to gain elevated privileges by exploiting crafted applications, specifically tied to MS15-010. Public exploits exist (e.g., Exploit-DB MS15-010 entry ...

CVE-2016-0174

CVE-2016-0174 describes a local privilege escalation in Windows kernel-mode drivers (Win32k) affecting multiple Windows family versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, and Windows 10 1511/Gold). The vulnerability allows a locally authenticated attacker to gain hig...